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DETAILED ACTION 

1 . This office action is in response to Applicant's amendment filed on April 1 , 2005. 
Claim 2 has been amended. Claims 1-13 are pending. 

" Claim Objections 

2. The objection of claim 2 in the first office action is withdrawn. 

Response to Arguments 

3. Applicant's arguments, see Remarks, filed on April 1 , 2005, have been 
considered but are not persuasive. In response to the arguments concerning the 
previously rejected claims, the following comments are made: 

The applicant argues Mapson does not disclose or suggest application identifier 
(AID) or the secret values (SV). The examiner disagrees and maintains all the 
rejections. Mapson discloses a unique identifier for the secure device and for the 
transaction, which is equivalent to the device id (DID) and application id (AID) of the 
current application. (Page 7, lines 13-14). Mapson also discloses a PIN (Page 7, line 
14), which is adequate support for a secret value (SV). 

In response to applicant's argument that the references fail to show certain 
features of applicant's invention, it is noted that the features upon which applicant relies 
(i.e., uses several identifiers outside the secured message block to determine how the 
specific message is secured while identifying the message) are not recited in the 
rejected claim(s). Although the claims are interpreted in light of the specification, 



Application/Control Number: 09/856,283 Page 3 

Art Unit: 2133 

limitations from the specification are not read into the claims. See In re Van Geuns, 988 
F.2d 1181, 26 USPQ2d 1057 (Fed. Cir. 1993). 

In response to applicant's argument that there is no suggestion to combine the 
references, the examiner recognizes that obviousness can only be established by 
combining or modifying the teachings of the prior art to produce the claimed invention 
where there is some teaching, suggestion, or motivation to do so found either in the 
references themselves or in the knowledge generally available to one of ordinary skill in 
the art. See In re Fine, 837 F.2d 1 071 , 5 USPQ2d 1 596 (Fed. Cir. 1 988) and In re 
Jones, 958 F.2d 347, 21 USPQ2d 1941 (Fed. Cir. 1992). In this case, combining the 
address is used to have a system that controls both devices that are defined using 
standard protocol and non-standard as suggested by Nixon (Col. 2, lines 8-9). The 
source and destination address is combined to each message despite the type of 
network protocol they use to communicate. In this case, the examiner has argued the 
obviousness to combine Mapson with the teachings of Nixon since Mapson does not 
teach use of combining address. The examiner asserts that the abstract in Mapson 
teaches secure messaging over unsecured link in a network using several identifiers to 
determine whether transactions are valid or invalid. Nixon teaches combining an 
address with device id and other identifiers to have a control system that controls both 
devices that are defined using a standard protocol and other. One ordinary skill in the 
art at the time the invention was made would have been motivated to combine Mapson 
with Nixon in order to combine the source and destination address to each message 
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despite the type of devices and network protocols used to communicate thereby making 
the system versatile. 

Claim Rejections - 35 USC §102 

4. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21 (2) 
of such treaty in the English language. 

5. Claims 4, 7 and 10 are rejected under 35 U.S.C. 102(e) as being anticipated by 
Mapson WO 98/32260. 

As per claim 4: 

Mapson teach a method for reception of a securely transmitted message by a 
recipient device the method comprising the steps of: 

(i) extracting one or more of a device identifier, an application identifier and an 
application value from a received secure message; (Page 2, lines 9-11; receiving 
means is enabled to decrypt the message using first unique identifier, and includes a list 
of possible second identifiers for the transmitting means associated with first identifiers) 

(j) generating by a first process using the device identifier, the application 
identifier and the application value a message value; (Page 2, line 4; having a first 
unique identifier; Page 7, lines 13-14; ... with a unique identifier for the secure device 
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and for the transaction; Page 5, lines 20-21; an advanced transaction number is 
assigned this may be simply 1,2, etc.; The office has interpreted application value as an 
advanced transaction number: The interpretation is given based on the definition of the 
application value given on the disclosure) 

(k) generating, according to a second process using the device identifier and the 
application identifier one or more secret values known substantially only to an 
originating device and the one or more intended recipient devices of the message; 
(Page 2, lines 26-30; the receiving means stores decryption information associated with 
the transmitting means ... this provides a unique key for each message without 
necessity for a real time link) 

(I) combining the message value with the one or more secret values, to establish 
a secret message value; (Page7, lines 12-14; the secure message ... with a unique 
identifier for the secure device and for the transaction as well as the usual PIN) 

(m) extracting a secure message block from the secure message; and (Page 2, 
lines 12-13; ...said message block is recognized as valid...) 

(n) applying the secret message value and the secure message block to a 
decoding process to form the securely transmitted message, this message having been 
securely transmitted by the originating device. (Page 2, lines 26-28; the receiving 
means stores decryption information associated with the transmitting means, so that 
given the first unique identifier and the random number message can be decrypted) 
As per claim 7: 
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Mapson teach an apparatus for reception of a securely transmitted message by a 
recipient device the apparatus comprising: 

(i) extraction means for extracting one or more of a device identifier, an 
application identifier and an application value from a received secure message; (Page 
2, lines 9-1 1 ; receiving means is enabled to decrypt the message using first unique 
identifier, and includes a list of possible second identifiers for the transmitting means 
associated with first identifiers) 

(j) message generation means for generating, by a first process using the device 
identifier, the application identifier and the application value, a message value; (Page 2, 
line 4; having a first unique identifier; Page 7, lines 13-14; ... with a unique identifier for 
the secure device and for the transaction; Page 5, lines 20-21 ; an advanced transaction 
number is assigned this may be simply 1,2, etc.) 

(k) secret value generating means for generating, according to a second process 
using the device identifier and the application identifier one or more secret values 
known substantially only to an originating device and the one or more intended recipient 
devices of the message; (Page 2, lines 26-30; the receiving means stores decryption 
information associated with the transmitting means ... this provides a unique key for 
each message without necessity for a real time link) 

(I) message value combining means for combining the message value with the 
one or more secret values, to establish a secret message value; (Page7, lines 12-14; 
the secure message ... with a unique identifier for the secure device and for the 
transaction as well as the usual PIN) 
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(m) secure message extraction means for extracting a secure message block 
from the secure message; (Page 2, lines 12-13; ...said message block is recognized as 
valid...) and 

(n) application means for applying the secret message value and the secure 
message block to a decoding process to form the securely transmitted message, this 
message having been securely transmitted by the originating device. (Page 2, lines 26- 
28; the receiving means stores decryption information associated with the transmitting 
means, so that given the first unique identifier and the random number message can be 
decrypted) 
As per claim 10: 

Mapson teach a computer program product including a computer readable 
medium having recorded thereon a computer program for reception of a securely 
transmitted message by a recipient device the program comprising: 

(i) extraction steps for extracting one or more of a device identifier, an application 
identifier and an application value from a received secure message; (Page 2, lines 9-1 1 ; 
receiving means is enabled to decrypt the message using first unique identifier, and 
includes a list of possible second identifiers for the transmitting means associated with 
first identifiers) 

(j) message generation steps for generating, by a first process using the device 
identifier, the application identifier and the application value, a message value; (Page 2, 
line 4; having a first unique identifier; Page 7, lines 13-14; ... with a unique identifier for 
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the secure device and for the transaction; Page 5, lines 20-21; an advanced transaction 
number is assigned this may be simply 1 ,2, etc.) 

(k) secret value generating steps for generating, according to a second process 
using the device identifier and the application identifier one or more secret values 
known substantially only to an originating device and the one or more intended recipient 
devices of the message; (Page 2, lines 26-30; the receiving means stores decryption 
information associated with the transmitting means ... this provides a unique key for 
each message without necessity for a real time link) 

(I) message value combining steps for combining the message value with the 
one or more secret values, to establish a secret message value; (Page7, lines 12-14; 
the secure message ... with a unique identifier for the secure device and for the 
transaction as well as the usual PIN) 

(m) secure message extraction steps for extracting a secure message block 
from the secure message; (Page 2, lines 12-13; ...said message block is recognized as 
valid...) and 

(n) application steps for applying the secret message value and the secure 
message block to a decoding process to form the securely transmitted message, this 
message having been securely transmitted by the originating device. (Page 2, lines 26- 
28; the receiving means stores decryption information associated with the transmitting 
means, so that given the first unique identifier and the random number message can be 
decrypted) 
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Claim Rejections - 35 USC §103 

6. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

7. Claims 1-3, 5-6, 8-9 and 11-13 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Mapson WO 98/32260 in view of Nixon et al. United States Letter 
Patent Number 5,828,851 . 

As per claim 1: 

Mapson teach a method for encoding and transmitting by an originating device of 
a secure message the method comprising the steps of: 

(a) generating by a first process using a device identifier, an application identifier 
and an application value a message value; (page 2, line 4; having a first unique 
identifier; Page 7, lines 13-14; ... with a unique identifier for the secure device and for 
the transaction; Page 5, lines 20-21; an advanced transaction number is assigned this 
may be simply 1 ,2, etc) 

(b) combining the message value with one or more first secret values, said secret 
values being known substantially only to the originating device and one or more 
intended recipient devices of the message, to establish a secret message value; (Page 
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7, lines 12-14; the secure message ... with a unique identifier for the secure device and 
for the transaction as well as the usual PIN) 

(c) applying the secret message value and the message to an encoding process 
to form a secure message block; and (Page 2, lines 6-7; transmitting means encrypts 
said message; Page 5, lines 25-28; the secure device is capable of PIN encryption with 
symmetric double length keys and is capable of encrypting multiple data blocks with a 
stored protected asymmetric 1024 bit modulus Secure Device Issuer public key half.) 

Mapson does not explicitly disclose 

(d) combining an address with the device identifier, the application identifier, the 
application value and the secure message block, to form a secure message for 
transmission, said secure message being decodable by the one or more of said 
intended recipient devices which thereby recover the message, the address, the device 
identifier, the application identifier and the application value. 

Nixon et al. in analogous art, however disclose combining an address with the 
device identifier, the application identifier, the application value and the secure message 
block, to form a secure message for transmission, said secure message being 
decodable by the one or more of said intended recipient devices which thereby recover 
the message, the address, the device identifier, the application identifier and the 
application value. (Col. 10, lines 65-67 and Col. 1 1 , line 2) 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify the method disclosed by Mapson to 
include combining an address with the device identifier, the application identifier, the 
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application value and the secure message block, to form a secure message for 
transmission, said secure message being decodable by the one or more of said 
intended recipient devices which thereby recover the message, the address, the device 
identifier, the application identifier and the application value. This modification would 
have been obvious because a person having ordinary skill in the art would have been 
motivated to do so, as suggested by, Nixon et al. (Col. 2, lines 8-9) in order to have a 
control system that controls both devices that are defined using a standard protocol and 
other. This way, the source and destination address is combined to each message 
despite the type of network protocol they use to communicate. 
As per claim 2: 

Mapson and Nixon et al. teach all the subject matter as discussed above. In 
addition, Mapson teach a method whereby an association of the device identifier, the 
application identifier, and the application value substantially uniquely identifies the 
originating device and a purpose of one or more of the message and the application, 
and a identifier for the message, such message identification being bound with the 
message content by virtue of the encoding process. (Page 2, lines 22-24; the encryption 
engine generates a unique key for each transaction, by operating a suitable function on 
one or more random or pseudo-random numbers generated by the transmitting means) 
As per claim 3: 

Mapson and Nixon et al. teach all the subject matter as discussed above. In 
addition, Mapson teach a method whereby the encoding process in step (c) comprises 
one or more of: 
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(e) a symmetric encryption process; (Page 5, lines 25-26; the secure device is 
capable of PIN encryption with symmetric double length keys) 

(f) an integrity process using one of keyed hash and symmetric encryption 
techniques; (Page 11, lines 1-6) 

(g) a process including both symmetric encryption and keyed integrity; and 

(h) including the secret message value in a higher level messaging protocol. 
As per claim 5: 

Mapson disclose an apparatus for encoding and transmitting by an originating 
device of a secure message, the apparatus comprising: 

(a) message generating means for generating, by a first process using a device 
identifier, an application identifier and an application value a message value; (page 2, 
line 4; having a first unique identifier; Page 7, lines 13-14; ... with a unique identifier for 
the secure device and for the transaction; Page 5, lines 20-21; an advanced transaction 
number is assigned this may be simply 1 ,2, etc) 

(b) first combining means for combining the message value with one or more 
first secret values, said secret values being known substantially only to the originating 
device and one or more intended recipient devices of the message, to establish a secret 
message value; (Page 7, lines 12-14; the secure message ... with a unique identifier for 
the secure device and for the transaction as well as the usual PIN) 

(c) application means for applying the secret message value and the message to 
an encoding process to form a. secure message block; (Page 2, lines 6-7; transmitting 
means encrypts said message; Page 5, lines 25-28; the secure device is capable of PIN 
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encryption with symmetric double length keys and is capable of encrypting multiple data 
blocks with a stored protected asymmetric 1024 bit modulus Secure Device Issuer 
public key half.) and 

Mapson does not explicitly disclose 

(d) combining an address with the device identifier, the application identifier, the 
application value and the secure message block, to form a secure message for 
transmission, said secure message being decodable by the one or more of said 
intended recipient devices which thereby recover the message, the address, the device 
identifier, the application identifier and the application value. 

Nixon et al. in analogous art, however disclose combining an address with the 
device identifier, the application identifier, the application value and the secure message 
block, to form a secure message for transmission, said secure message being 
decodable by the one or more of said intended recipient devices which thereby recover 
the message, the address, the device identifier, the application identifier and the 
application value. (Col. 3, lines 48-55) 

The rationale for combining the two references is the same as in claim 1 
As per claim 6: 

Mapson and Nixon et al. teach all the subject matter as discussed above. In 
addition, Mapson disclose an apparatus wherein the encoding means comprises one or 
more of: 

(e) a symmetric encryption means; (Page 5, lines 25-26; the secure device is 
capable of PIN encryption with symmetric double length keys) 
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(f) an integrity processing means using keyed hash and symmetric encryption 
techniques; (Page 11, lines 1-6) 

(g) a keyed-symmetric processing means performing symmetric encryption and 
keyed integrity; and 

(h) encapsulation means for including the secret message value in a higher level 
messaging protocol. 

As per claim 8: 

Mapson disclose a computer program product including a computer readable 
medium having recorded thereon a computer program for encoding and transmitting by 
an originating device of a secure message, the program comprising: 

(a) message generating steps for generating, by a first process using a device 
identifier, an application identifier and an application value a message value; (page 2, 
line 4; having a first unique identifier; Page 7, lines 13-14; ... with a unique identifier for 
the secure device and for the transaction; Page 5, lines 20-21; an advanced transaction 
number is assigned this may be simply 1 ,2, etc) 

(b) first combining steps for combining the message value with one or more first 
secret values, said secret values being known substantially only to the originating 
device and one or more intended recipient devices of the message, to establish a secret 
message value; (Page 7, lines 12-14; the secure message ... with a unique identifier for 
the secure device and for the transaction as well as the usual PIN) 

(c) application steps for applying the secret message value and the message to 
an encoding process to form a secure message block; (Page 2, lines 6-7; transmitting 
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means encrypts said message; Page 5, lines 25-28; the secure device is capable of PIN 
encryption with symmetric double length keys and is capable of encrypting multiple data 
blocks with a stored protected asymmetric 1024 bit modulus Secure Device Issuer 
public key half.) and 

Mapson does not explicitly disclose 

(d) combining an address with the device identifier, the application identifier, the 
application value and the secure message block, to form a secure message for 
transmission, said secure message being decodable by the one or more of said 
intended recipient devices which thereby recover the message, the address, the device 
identifier, the application identifier and the application value. 

Nixon et al.'in analogous art, however disclose combining an address with the 
device identifier, the application identifier, the application value and the secure message 
block, to form a secure message for transmission, said secure message being 
decodable by the one or more of said intended recipient devices which thereby recover 
the message, the address, the device identifier, the application identifier and the 
application value. (Col. 3, lines 48-55) 

The rationale for combining the two references is the same as in claim 1 . 
As per claim 9: 

Mapson and Nixon et al. teach all the subject matter as discussed above. In 
addition, Mapson disclose a computer program product whereby the encoding steps in 
step (c) comprise one or more of: 
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(e) a symmetric encryption steps; (Page 5, lines 25-26; the secure device is 
capable of PIN encryption with symmetric double length keys) 

(f) an integrity processing steps using one of keyed hash and symmetric 
encryption techniques; (Page 11, lines 1-6) 

(g) keyed-symmetric steps performing symmetric encryption and ensuring keyed 
integrity; and 

(h) encapsulation steps for including the secret message value in a higher level 
messaging protocol. 

As per claim 11: 

Mapson teach a system providing secure communications comprising an 
originating device and one or more receiving devices, wherein said originating device 
comprises an apparatus for encoding and transmitting a secure message, the 
originating device comprising: 

(a) message generating means for generating, by a first process using a device 
identifier, an application identifier and an application value a message value; (page 2, 
line 4; having a first unique identifier; Page 7, lines 13-14; ... with a unique identifier for 
the secure device and for the transaction; Page 5, lines 20-21; an advanced transaction 
number is assigned this may be simply 1 ,2, etc) 

(b) first combining means for combining the message value with one or more 
first secret values, said secret values being known substantially only to the originating 
device and one or more intended recipient devices of the message, to establish a secret 
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message value; (Page 7, lines 12-14; the secure message ... with a unique identifier for 
the secure device and for the transaction as well as the usual PIN) 

(c) application means for applying the secret message value and the message to 
an encoding process to form a secure message block; (Page 2, lines 6-7; transmitting 
means encrypts said message; Page 5, lines 25-28; the secure device is capable of PIN 
encryption with symmetric double length keys and is capable of encrypting multiple data 
blocks with a stored protected asymmetric 1024 bit modulus Secure Device Issuer 
public key half.) and 

and wherein a said receiving device comprises an apparatus for reception of a 
securely transmitted message, said receiving device comprising: 

(e) extraction means for extracting one or more of a device identifier, an 
application identifier and an application value from a received secure message; (Page 
2, lines 9-1 1 ; receiving means is enabled to decrypt the message using first unique 
identifier, and includes a list of possible second identifiers for the transmitting means 
associated with first identifiers) 

(f) message generation means for generating, by a first process using the device 
identifier, the application identifier and the application value, a message value; (Page 2, 
line 4; having a first unique identifier; Page 7, lines 13-14; ... with a unique identifier for 
the secure device and for the transaction; Page 5, lines 20-21; an advanced transaction 
number is assigned this may be simply 1 ,2, etc.) 

(g) secret value generating means for generating, according to a second 
process using the device identifier and the application identifier one or more secret 
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values known substantially only to an originating device and the one or more intended 
recipient devices of the message; (Page 2, lines 26-30; the receiving means stores 
decryption information associated with the transmitting means ... this provides a unique 
key for each message without necessity for a real time link) 

(h) message value combining means for combining the message value with the 
one or more secret values, to establish a secret message value; (Page7, lines 12-14; 
the secure message ... with a unique identifier for the secure device and for the 
transaction as well as the usual PIN) 

(i) secure message extraction means for extracting a secure message block 
from the secure message; (Page 2, lines 12-13; ...said message block is recognized as 
valid...) and 

(j) application means for applying the secret message value and the secure 
message block to a decoding process to form the securely transmitted message, this 
message having been securely transmitted by the originating device. (Page 2, lines 26- 
28; the receiving means stores decryption information associated with the transmitting 
means, so that given the first unique identifier and the random number message can be 
decrypted) 

Mapson does not explicitly disclose 

(d) combining an address with the device identifier, the application identifier, the 
application value and the secure message block, to form a secure message for 
transmission, said secure message being decodable by the one or more of said 
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intended recipient devices which thereby recover the message, the address, the device 
identifier, the application identifier and the application value. 

Nixon et al. in analogous art, however disclose combining an address with the 
device identifier, the application identifier, the application value and the secure message 
block, to form a secure message for transmission, said secure message being 
decodable by the one or more of said intended recipient devices which thereby recover 
the message, the address, the device identifier, the application identifier and the 
application value. (CoL3, lines 48-55) 

The rationale for combining the two references is the same as in claim 1. 
As per claim 12: 

Mapson and Nixon et al. teach all the subject matter as discussed above. In 
addition, Mapson further disclose a system; 

wherein said originating device comprises: 
(k) first processing means; (Page 2, lines 6-7) 

(I) transmitting means adapted to perform one or more of establishing and 
maintaining communications with a receiving means, said first processing means being 
adapted to control said transmitting means, and adapted to support features (a) to 
(d); (Page 2, lines 4-8) 

wherein a said receiving device comprises: 

(m) second processing means; (Page 2, lines 26-28) and 

(n) the receiving means, being adapted to perform one or more of establishing 
and maintaining communications in conjunction with said transmitting means, said 
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second processing means being adapted control said receiving means, and further 
adapted to support features (e) to (j). (Page 2, lines 9-14) 
As per claim 13: 

Mapson and Nixon et al. teach all the subject matter as discussed above. In 
addition, Mapson disclose a system wherein said originating device comprises one of: 

(o) a PC comprising the transmitting means, a smart card reader, the first 
processing means being responsive to the smart card reader and adapted to control 
said transmitting means, said originating device further comprising a smart card 
adapted to interface with the smart card reader, said smart card having on board 
second processing means which in conjunction with said first processing means are 
adapted to support features (a) to (d); and (Page 4, lines 22-24) 

(p) a mobile telephone, comprising the transmitting means, the first processing 
means being adapted to control said transmitting means, and also adapted to support 
features (a) to (d); and 

(q) a set top box, comprising the transmitting means, the first processing means 
being adapted to control said transmitting means, and also adapted to support features 
(a) to (d); and 

(r) a cable modem, comprising the transmitting means, the first processing 
means being adapted to control said transmitting means, and also adapted to support 
features (a) to (d); and 
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(s) a personal digital assistant, comprising the transmitting means, the first 
processing means being adapted to control said transmitting means, and also adapted 
to support features (a) to (d). 

Conclusion 

8. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .1 36(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

9. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Shewaye Gelagay whose telephone number is 571-272- 
4219. The examiner can normally be reached on 8:00 am to 5:30 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Albert Decady can be reached on 571-272-3819. The fax phone number for 
the organization where this application or proceeding is assigned is 703-872-9306. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 



Shewaye Gelagay 

Examiner 
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